$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/168c7305-41d0-3847-b688-fd50fc5a3bbb.roa File: 168c7305-41d0-3847-b688-fd50fc5a3bbb.roa (raw, json) Hash identifier: 6PfR/MQ+gmyvWiaXurB6weiPFbt0vHLTLuhEw7F7rLA= Subject key identifier: A7:71:7F:F1:14:B7:A4:53:2A:E6:03:49:57:4F:D3:B4:70:BA:B8:90 Certificate issuer: /CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Certificate serial: 010D0C9F4328584F698D66CCA7D673168F44B500 Authority key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/168c7305-41d0-3847-b688-fd50fc5a3bbb.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 398047 IP address blocks: 23.129.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:66:cc:a7:d6:73:16:8f:44:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=a3b1c199-672c-4cac-a4d8-2b3015129c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:41:43:71:86:c9:3b:43:79:49:1e:e0:a9: 2f:a7:e4:90:24:37:97:eb:c3:17:73:2a:6e:31:0f: 65:3f:00:17:d0:bd:13:4d:4f:b0:6f:ee:44:68:60: 01:1f:30:70:10:21:6a:9b:e4:42:32:aa:bc:90:40: a9:34:b6:1b:0f:8e:ce:4e:2a:b3:45:49:43:c3:e0: ef:fb:c2:46:ec:68:a2:7e:86:ab:54:57:5b:20:dc: 87:82:3f:ab:b0:fc:0b:75:52:06:4b:f2:26:27:79: 68:4f:48:9c:17:67:4f:f4:d6:5d:fd:2a:9e:04:2b: cf:21:43:9d:3f:8f:fb:42:be:e2:98:f8:05:44:d2: ad:2e:2c:40:97:25:3f:0b:ae:00:89:08:58:3b:6c: d9:a0:b1:87:18:b7:58:7f:36:d8:92:93:68:b1:bd: 89:df:4e:9c:b4:67:d5:cd:40:a0:a5:a6:5a:8d:ff: 7b:7b:80:6e:3a:14:09:17:c2:34:67:98:aa:64:71: 87:9b:fd:f3:96:4f:9c:38:b6:69:ce:2f:ef:43:bb: b6:38:67:0d:20:b8:01:5c:33:14:f1:9f:92:33:96: e2:d3:6c:00:49:10:a4:49:ee:33:54:9e:c5:60:e0: e0:4b:03:bb:bd:a4:ae:8c:21:29:6c:87:1b:05:8d: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:71:7F:F1:14:B7:A4:53:2A:E6:03:49:57:4F:D3:B4:70:BA:B8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/168c7305-41d0-3847-b688-fd50fc5a3bbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl X509v3 Authority Key Identifier: keyid:F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer sbgp-ipAddrBlock: critical IPv4: 23.129.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:95:cd:48:75:bc:fe:47:f3:b1:cb:1e:68:1c:c3:be:b0:29: 7a:cf:68:23:22:8c:09:0d:49:2f:9d:e1:dc:7b:5a:7c:a9:63: c8:51:3b:01:e0:96:2f:c0:41:2e:87:5a:e5:86:91:e1:08:8a: cc:6e:cd:09:c8:c3:ee:90:42:f9:0c:0b:aa:fe:8d:53:b6:8f: df:8f:29:24:65:c8:06:53:f0:92:1e:88:23:3d:b7:4a:aa:df: f9:a3:80:60:c7:d1:04:e0:e6:16:49:f2:47:de:44:68:33:c9: b2:67:9c:d4:5b:71:bd:21:fb:7b:d4:fa:e9:77:78:d4:fd:dc: 88:05:2e:69:b4:d8:d5:72:2e:be:75:38:a0:28:6c:20:dc:d4: ea:58:76:4f:de:50:7f:c6:19:24:cf:e7:b6:22:a1:a7:a8:c2: 8c:e9:9d:98:4b:2a:72:bb:c0:84:b6:44:18:22:2f:d2:97:82: a8:08:ca:4d:d5:0a:98:06:99:16:e0:32:47:77:af:9a:1f:16: ac:83:42:a9:51:d4:b1:ce:fd:42:2b:54:66:f1:cb:a5:e3:b7: 62:1a:0d:e7:b5:7b:e1:8e:b6:8f:8d:da:f0:d3:64:3d:24:bd: d7:74:ad:1b:1c:d2:fc:6e:f9:8e:ca:cc:52:cf:41:a3:b5:03: df:7c:63:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjWbMp9ZzFo9EtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0 MmE5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YTNiMWMxOTktNjcyYy00Y2FjLWE0ZDgtMmIzMDE1MTI5YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOJBQ3GGyTtDeUke4Kkvp+SQJDeX68MXcypu MQ9lPwAX0L0TTU+wb+5EaGABHzBwECFqm+RCMqq8kECpNLYbD47OTiqzRUlDw+Dv +8JG7GiifoarVFdbINyHgj+rsPwLdVIGS/ImJ3loT0icF2dP9NZd/SqeBCvPIUOd P4/7Qr7imPgFRNKtLixAlyU/C64AiQhYO2zZoLGHGLdYfzbYkpNosb2J306ctGfV zUCgpaZajf97e4BuOhQJF8I0Z5iqZHGHm/3zlk+cOLZpzi/vQ7u2OGcNILgBXDMU 8Z+SM5bi02wASRCkSe4zVJ7FYODgSwO7vaSujCEpbIcbBY0U9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdxf/EUt6RTKuYDSVdP07RwuriQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5 Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvMTY4YzczMDUtNDFkMC0z ODQ3LWI2ODgtZmQ1MGZjNWEzYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzA4OWNlOGUtZjE3Ni00ZGQyLWE1 N2EtOGE0OGNmNmU0MmE5L2MwODljZThlLWYxNzYtNGRkMi1hNTdhLThhNDhjZjZl NDJhOS5jcmwwHwYDVR0jBBgwFoAU93n2nGTVuPkEgdlHr6jdDKZFoHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4 Y2Y2ZTQyYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaVzUh1vP5H87HLHmgcw76wKXrPaCMijAkNSS+d4dx7WnypY8hROwHg li/AQS6HWuWGkeEIisxuzQnIw+6QQvkMC6r+jVO2j9+PKSRlyAZT8JIeiCM9t0qq 3/mjgGDH0QTg5hZJ8kfeRGgzybJnnNRbcb0h+3vU+ul3eNT93IgFLmm02NVyLr51 OKAobCDc1OpYdk/eUH/GGSTP57YioaeowozpnZhLKnK7wIS2RBgiL9KXgqgIyk3V CpgGmRbgMkd3r5ofFqyDQqlR1LHO/UIrVGbxy6Xjt2IaDee1e+GOto+N2vDTZD0k vdd0rRsc0vxu+Y7KzFLPQaO1A998Y3Q= -----END CERTIFICATE-----Generated at Thu Oct 8 07:39:02 2026 by rpki-client